My wife works in IT at a mid sized city. They still store credentials in source control.